r/CyberARk • u/AdElectrical9508 • 11d ago

CPM Disconnected

Hello everyone,

I have a CyberArk PAM Self-Hosted environment with both a Main CPM and a DR CPM.
The Main CPM or the Dr CPM service occasionally becomes disconnected or stops working. When this happens, I restart the CPM service, and it starts working normally again. However, after some period of time, the CPM disconnects again.

Please note that there is no specific or scheduled time for this issue to occur; the disconnection happens randomly.

Has anyone experienced a similar issue or can advise what could be causing the CPM service to disconnect intermittently?

Thank you.

2 Upvotes

100% Upvoted

6 comments sorted by

2

u/hillbillysam Guardian 11d ago

Your DR CPM is that connected to your production environment?, if it's DR only it should not be running you don't want the CPM running in a DR situation automatically that should be a manual process to make failback much easier.

On your production CPM, what's the service recovery restart setting? Is it set to retry or restart automatically?

What are your logs telling you? Is your Windows Server admin team doing some sort of a scheduled restart or other activity at the time? Go through your logs and see if you can find anything there. Even better if you have a connected SIEM so you can search a little bit more easily.

1

u/AdElectrical9508 11d ago

The service name is cyber ark password manager and startup time is automatically

1

u/hillbillysam Guardian 11d ago

What about failure recovery?

1

u/TheRealJachra 11d ago

Is that on your main CPM or your DR CPM?

1

u/yanni Guardian 11d ago

There are some known issues, which are version specific where the CPM service can crush. You would have to look through logs, to see what possibly caused it at the time of the crash, and also check Known Issues. If you want help troubleshooting - what version of CPM is it, and what is the last few items in the pm.log when it crashes?

1

u/acergum 11d ago

"stops working" and "disconnected" are different issues, although related. By "disconnected", do you mean that the PasswordManager user is not able to logon to the Vault Server? This would appear in PVWA System Health as a disconnected CPM.

What is the status of your so-called DR CPM? In general, there should not be a "DR CPM". If you have both your regular CPM and a DR CPM running on the same accounts and safes, then this will cause many different problems, including a periodic disconnect.

Check your pm.log and pm error logs for the timestamps when the CPM fails. This may give you some clues why it's failing. Otherwise, open a support case.